Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/323830313a323a38353a3a623a303a302f39362d3936203d3e203137313437.roa
File:                     323830313a323a38353a3a623a303a302f39362d3936203d3e203137313437.roa (raw, json)
Hash identifier:          +kEsxHXXuYRnrZiqoVB8/FHcpN7U/TV3DmWNQWUAAEA=
Subject key identifier:   9D:AA:43:23:FE:1F:80:DD:77:48:17:E4:54:DB:CB:5F:12:D2:6C:37
Certificate issuer:       /CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
Certificate serial:       31747DB3231CF1CF464C3BC726828974546B9CAA
Authority key identifier: D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/323830313a323a38353a3a623a303a302f39362d3936203d3e203137313437.roa
Signing time:             Wed 17 Jun 2026 17:30:01 +0000
ROA not before:           Wed 17 Jun 2026 17:25:01 +0000
ROA not after:            Wed 16 Jun 2027 17:30:01 +0000
asID:                     17147
IP address blocks:        2801:2:85::b:0:0/96 maxlen: 96
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:74:7d:b3:23:1c:f1:cf:46:4c:3b:c7:26:82:89:74:54:6b:9c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B428B65F4DBA16E44F7C7412B71C126F71DC6B
        Validity
            Not Before: Jun 17 17:25:01 2026 GMT
            Not After : Jun 16 17:30:01 2027 GMT
        Subject: CN=9DAA4323FE1F80DD774817E454DBCB5F12D26C37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:ad:19:37:24:e7:c5:90:28:86:d4:bf:33:
                    46:d9:84:0a:89:2c:84:f6:53:79:ba:77:5d:da:a4:
                    8b:47:75:89:93:5d:d7:a0:b3:32:30:f6:c6:37:92:
                    6b:4d:93:c7:b6:5a:05:ea:f3:1c:90:4d:e0:5d:ef:
                    23:06:36:f3:7c:c2:8a:d3:02:1d:49:2a:e9:68:d2:
                    94:3e:a2:75:03:5b:4c:27:e7:64:7e:bf:b9:b8:ce:
                    3e:9b:a8:0b:a5:4f:cd:dd:cc:88:ce:97:51:2c:98:
                    b4:8e:9a:93:be:68:92:bb:9b:42:f0:a6:f5:af:77:
                    61:94:e4:d4:92:49:6e:24:40:c8:00:55:9f:f3:f1:
                    30:45:c8:c6:0f:6c:c5:11:fb:be:d0:a5:78:ef:6f:
                    f8:3a:55:27:88:12:47:b4:d8:d1:61:19:9b:43:a1:
                    75:f2:03:41:e8:12:db:1e:ff:06:22:d6:ea:ef:85:
                    71:3e:f1:09:b9:a2:4e:2b:18:87:c7:91:9f:b8:52:
                    b5:ed:42:a0:40:79:d4:29:5e:8d:83:45:66:1e:42:
                    d2:9f:06:d7:86:7c:04:a8:dd:25:79:a4:f5:b1:b4:
                    fb:1c:25:45:ae:e8:c6:99:33:f3:05:eb:9e:f2:a0:
                    83:84:90:95:40:22:cc:90:7d:f4:28:68:45:27:ff:
                    47:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AA:43:23:FE:1F:80:DD:77:48:17:E4:54:DB:CB:5F:12:D2:6C:37
            X509v3 Authority Key Identifier:
                keyid:D0:B4:28:B6:5F:4D:BA:16:E4:4F:7C:74:12:B7:1C:12:6F:71:DC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0B428B65F4DBA16E44F7C7412B71C126F71DC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/776769DA9250AEE016ECE691EF523EA8B93D6CBFBE77577C339E491D8B8E2395/0/323830313a323a38353a3a623a303a302f39362d3936203d3e203137313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:2:85:0:0:b::/96

    Signature Algorithm: sha256WithRSAEncryption
         84:41:1d:8f:d0:6e:aa:69:36:bf:85:51:44:f9:a9:f0:e1:6f:
         3d:c0:46:8a:33:09:d9:03:70:e4:80:3c:a7:05:f8:07:f9:08:
         26:1e:57:3a:0d:98:c0:fc:72:b3:03:90:07:56:47:f1:fd:39:
         68:c2:3c:d7:b5:d8:9a:80:d0:12:28:17:85:f4:72:2e:f0:05:
         d3:d4:f7:0d:e1:11:50:75:b0:81:a0:b8:15:0f:c1:f7:dc:b8:
         79:12:4a:ee:04:70:6f:1b:98:c4:b3:42:3d:17:83:5f:b2:71:
         57:b1:3a:1c:6c:a0:47:a5:79:44:38:64:3a:0d:b3:98:8e:b6:
         eb:8e:71:6f:7a:50:41:0d:7e:a1:79:8f:34:8c:0f:f5:f9:ad:
         31:b3:d5:e0:63:58:eb:2a:eb:d1:6e:43:6b:07:72:b4:94:3f:
         d8:51:bf:60:82:20:6b:21:ec:e3:b7:a2:c9:6c:c6:cb:89:4f:
         1e:48:72:be:32:04:0a:a8:8a:38:8d:c3:f8:46:11:a7:79:54:
         27:a7:f9:a6:19:c7:a7:8e:93:55:3d:4f:74:71:a1:e6:a6:e7:
         39:dd:ec:0a:30:2e:c6:00:5e:88:a7:d9:dd:25:2e:2a:4f:42:
         69:43:cd:9f:9a:91:72:37:c4:80:d6:8e:48:46:33:73:d7:ba:
         c0:9c:01:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:53:10 2026 by rpki-client